CVE-2020-27661

A divide-by-zero flaw was found in QEMU in the dwc-hsotg (dwc2) USB host controller emulation. More specifically, HCCHAR_MPS was read from a device register and later used as a divisor without performing a sanity check. This flaw allows a malicious or buggy guest to crash the QEMU process on the host, resulting in a denial of service.

This flaw did not affect the following versions of QEMU as they did not include support for dwc2 USB host controller emulation:

• qemu-kvm-ma as shipped with Red Hat Enterprise Linux 7.
• qemu-kvm-rhev as shipped with Red Hat Virtualization and Red Hat OpenStack.
• qemu-kvm as shipped with Red Hat Enterprise Linux 6, 7, 8, and RHEL Advanced Virtualization.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.